simplified the demo scripts
add option to configure whether to audit certprofile